TC7 Day 1 – Anon. Communication For The U.S.DoD… And You

September 18, 2005 by 2 Comments

roger
UPDATE: Slides

Roger Dingledine gave a presentation on Tor, which we’ve covered before. It was really interesting and covered common misconceptions. People often talk about Tor being abused, but the fact is true criminals have far better botnets that they can use for their work instead of Tor. Something that I hadn’t realized before is that if you have a Tor exit node on the same IP address as your web server all of the Tor users will get the benefit of a fully encrypted link to your website instead of the usual plain text final hop. The EFF is currently running a GUI competition. Somebody needs to build a Sneakers style Google map of hops. Any takers?

Continue reading “TC7 Day 1 – Anon. Communication For The U.S.DoD… And You” →

TC7 Day 1 – The Fragmentation Attack In Practice

September 17, 2005 by 10 Comments

andrea
UPDATE: Slides, paper and code

Andrea Bittau (not blurry in real life) gave a demo of the WEP fragmentation attack. The attack only requires one sniffed packet from the WEPed network unlike replay attacks which usually require you to get an ARP packet. He built a simple tool to sniff a packet and then build packets to create a legitimate connection to the access point. At this point a server on the internet is contacted to flood the network with packets at up to 1400 packets per second. This generates a ton of unique IVs and aircrack is called every 100000 packets till the WEP key is cracked. In the demo it took under 5 minutes for the automated process to complete.

Continue reading “TC7 Day 1 – The Fragmentation Attack In Practice” →

TC7 Day 1 – Bastille Hardening Assessment Tool

September 17, 2005 by 3 Comments

jay beale
UPDATE: Slides

Bastille is an OS hardening tool for Linux. Jay Beale gave a presentation on how to “lock down” a system using it. Bastille can analyze your current setup and give you a rating based on how secure your system is. The program asks you questions based on your configuration (“Do you want to turn off ### service?”). It explains the possible consequences of taking the suggested actions. The process can be very educational. The system is modular so you can add your own modules by writing a few lines of Perl. Bastille can also generate configurations that can be deployed across multiple machines.

Continue reading “TC7 Day 1 – Bastille Hardening Assessment Tool” →

Individual Throttle Body Setup

September 16, 2005 by 19 Comments

itb

Homemadeturbo.com is dedicated to scratch building turbo systems using salvaged parts. That’s pretty cool, but this project really caught my eye: building an individual throttle body manifold for a Honda engine. Jeff picked up a  set of throttle bodies from a 2001 gixxer on eBay for $50. He then cut down the stock manifold and added extensions to attach the throttle bodies using silicon couplers. The velocity stacks also came from eBay for $35. The only really difficult part seems to be attaching the throttle position sensor. It is definitely a great looking set up and much cheaper than it would ever be off the shelf.

[thanks bodiby]

Continue reading “Individual Throttle Body Setup” →